JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.37.31

104.207.37.31 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.37.31

Whois 104.207.37.31

IP Abuse Reports for 104.207.37.31:

This IP address has been reported a total of 147 times from 20 distinct sources. 104.207.37.31 was first reported on June 11th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-05-31 07:42:00 (5 days ago)	(y4) Failed scan -byebye- from 104.207.37.31 (US/United States/-): (CF_ENABLE)	Hacking
Anonymous	2026-05-29 21:24:12 (1 week ago)	[ssd5.kdns.gr] httpd-login-spray-site: sites=rheumatologiko.gr; logs=/var/log/httpd/domains/rheumato ... show more [ssd5.kdns.gr] httpd-login-spray-site: sites=rheumatologiko.gr; logs=/var/log/httpd/domains/rheumatologiko.gr.log; samples=site_wide=true \| distinct_ips=20 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-05-29 21:13:20 (1 week ago)	(y4) Failed scan -byebye- from 104.207.37.31 (US/United States/-): (CF_ENABLE)	Hacking
🇲🇹 Malta	2026-05-29 18:14:42 (1 week ago)	104.207.37.31 - - [29/May/2026:20:14:42 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ... show more 104.207.37.31 - - [29/May/2026:20:14:42 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack VPN IP
🇬🇧 CDN	2026-04-02 17:45:48 (2 months ago)	Path traversal: 'tab'=>3\	SQL Injection
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇮🇹 VHosting	2025-12-24 02:10:22 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:47 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-25 04:07:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.37.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.37.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:07:33.116091 2025] [security2:error] [pid 3464:tid 3464] [client 104.207.37.31:37993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.adj-tech.net"] [uri "/.env"] [unique_id "aSUrhXHcxcsQtHafs8Q5DQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:03:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.37.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.37.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:03:50.812404 2025] [security2:error] [pid 1647140:tid 1647197] [client 104.207.37.31:11175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pluralmatrix.com"] [uri "/.git/HEAD"] [unique_id "aSUclsWdNO_bFaD03ZYwHwAAANM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:42:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.37.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.37.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:42:22.709785 2025] [security2:error] [pid 21271:tid 21271] [client 104.207.37.31:11071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.obamaslegacy.review"] [uri "/.env"] [unique_id "aSUXjqEJ1wqIuDyTKJC6TQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:13:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.37.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.37.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:13:03.380202 2025] [security2:error] [pid 15589:tid 15628] [client 104.207.37.31:32827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.havacubvision.com"] [uri "/.git/HEAD"] [unique_id "aSUCnyIjVFKa_KFJ49hN7AAAANc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-16 14:14:42 (6 months ago)	(From [email protected]) Multiverse AI - The Only Platform That Gives You Access To Every ... show more (From [email protected]) Multiverse AI - The Only Platform That Gives You Access To Every Top AI Model — In Every Version — All Inside A Single, Beautifully Simple Dashboard. https://ai108.online/MultiverseAI ChatGPT (3.5 → 4.5 → 4o → 5 → Turbo → Nano) Gemini (1.5 Pro → 2.0 Flash) Claude (3 Opus → Sonnet → Haiku) Grok (1 through 4) DALL·E, Veo, Kling, ElevenLabs, DeepSeek, FLUX, LLaMA & more And yes — you get every future version included automatically. https://ai108.online/MultiverseAI to UNSUBSCRIBE: https://ai108.online/unsubscribe?domain=shannonchiropractic.com Address: 108 West Street Comstock Park, MI 48721 show less	Phishing Web Spam
Anonymous	2025-11-13 20:44:21 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 nowyouknow	2025-11-11 05:38:31 (6 months ago)	(From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING ... show more (From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING REQUIRED PROFIT-READY EBOOKS with covers, TOC, chapters, sections, links, images, & content! https://viewbet-24.site/eBookWriterAI to UNSUBSCRIBE: https://viewbet-24.site/unsubscribe?domain=waynesborochiropractor.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.189

🇱🇹 194.165.16.162

🇺🇸 193.3.53.3

🇬🇧 188.240.59.5

🇺🇸 173.239.240.159

🇳🇱 168.235.125.60

🇩🇪 47.245.141.131

🇬🇧 35.203.211.82

🇺🇸 20.169.80.121

🇩🇪 212.227.88.225

🇺🇸 192.253.209.5

🇺🇸 178.128.148.147

🇺🇸 172.236.228.202

🇺🇸 147.182.202.179

🇮🇳 122.187.230.82

🇨🇳 122.156.226.44

🇰🇷 119.192.59.80

🇺🇸 64.94.159.235

🇩🇴 190.167.237.191

🇨🇿 178.17.14.235